Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/f110b177-91f0-3d3e-8955-10231347c49e.roa
File:                     f110b177-91f0-3d3e-8955-10231347c49e.roa (raw, json)
Hash identifier:          kWap0L2r3fr+bM9Wz2CfvLHBo/Z4hA1Ptlph2vAxBf0=
Subject key identifier:   E8:E5:DB:91:6F:0E:E4:A6:2E:87:40:E5:AC:66:6C:2C:83:FB:CD:91
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F43285849F715163071D6D177B6B60DC0
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/f110b177-91f0-3d3e-8955-10231347c49e.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     21976
IP address blocks:        130.156.4.0/24 maxlen: 24
                          130.156.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:16:30:71:d6:d1:77:b6:b6:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=1a7cf724-3225-4d2f-9ad0-d0da6dd49d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2e:49:df:cc:03:9a:b8:20:6a:b3:b3:9c:cf:
                    e4:b7:9a:ee:b7:69:ad:a0:78:47:0b:cc:1f:b2:a5:
                    f8:f8:54:76:43:a5:13:46:f6:2b:67:29:73:6f:52:
                    2b:08:f5:69:64:0d:e6:b3:28:dc:ca:2c:64:fa:87:
                    ea:f2:8b:bc:f3:6a:4e:49:e7:2f:a5:dd:81:5b:42:
                    2a:6b:1b:e3:ff:10:87:fe:97:24:8d:53:ba:21:52:
                    00:9e:40:e4:8c:66:f9:5d:20:a2:1a:f6:53:89:cc:
                    5d:7d:9c:cc:73:2a:51:af:a5:dd:d6:cd:0d:af:d8:
                    d8:06:a8:d6:59:60:8b:f9:62:c1:ff:ef:9d:f6:bd:
                    55:3d:93:cf:ed:f3:35:30:61:68:82:8d:65:d1:c6:
                    ae:e4:5c:1f:e3:bc:d3:51:cb:4b:36:78:b5:13:09:
                    aa:49:cd:40:67:9a:0e:17:6b:ba:15:fc:65:72:46:
                    8a:3a:69:a1:04:6e:e5:15:8a:b3:44:b0:43:82:e3:
                    c1:ba:04:e6:af:e4:fd:c8:88:4a:06:59:d5:d9:6a:
                    b8:5c:b7:9d:da:bb:26:e2:fc:70:5b:85:2b:2f:aa:
                    e4:89:e6:a1:d7:07:b6:08:26:6e:7e:6a:c6:bd:b6:
                    14:b9:27:30:54:d6:72:92:4b:d3:de:7b:2b:26:b9:
                    3b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E5:DB:91:6F:0E:E4:A6:2E:87:40:E5:AC:66:6C:2C:83:FB:CD:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/f110b177-91f0-3d3e-8955-10231347c49e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.4.0/24
                  130.156.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:20:17:83:d8:bd:cc:1f:d1:9a:eb:06:cf:1b:1f:27:c4:d9:
         18:7f:84:f9:26:31:ba:a7:75:68:b8:2b:c2:25:73:01:a8:9f:
         73:d9:d1:a1:8c:8a:e3:fe:ea:6b:df:1a:d2:bd:88:9e:74:ba:
         cc:6f:a1:83:00:8f:62:4e:6a:b6:af:3c:d5:fb:c3:35:fc:2c:
         47:0d:15:09:c1:3a:71:cb:64:07:97:ef:31:00:87:bf:ea:14:
         1c:5c:b1:10:b3:98:09:7e:d0:bc:7d:64:26:5d:08:5d:6e:a1:
         88:6d:4a:4f:78:98:67:86:a2:41:1d:1d:78:8d:73:d5:5b:ff:
         6d:bc:59:33:fd:9f:ed:95:0c:0f:5c:2f:d0:46:f4:1a:7c:bb:
         94:bb:6b:e0:76:db:ea:e8:8f:1d:8f:b0:41:93:07:dd:9f:e5:
         1d:63:a3:49:8d:50:be:cb:22:1a:60:a5:1b:53:97:73:66:80:
         3a:29:ea:21:23:2d:5d:43:97:dd:03:d4:98:be:0f:63:69:79:
         12:62:a4:93:55:2e:b7:1d:6a:6e:72:d6:37:70:33:31:1f:15:
         e7:e6:21:81:69:db:55:d4:4b:19:d4:92:f5:0e:5a:b4:19:3b:
         5e:19:93:db:da:7d:c4:59:c6:42:6f:6b:07:db:85:ad:a4:73:
         dc:37:ba:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:06:34 2025 by rpki-client